This website runs without analytics, tracking, or ad networks. Here is what data is processed anyway.
Controller
The controller for data processing on this website within the meaning of the GDPR is:
HBI Engineering GmbH
Nördliche Hauptstraße 19
83700 Rottach-Egern, Germany
Phone +49 (0)8022.7055415
Email: office@hbi.email
Represented by the managing director Dr.-Ing. Ralf Heidelberg M.Eng. LL.M. Further company details are in the legal notice.
We have not appointed a data protection officer, as the statutory conditions for doing so do not apply. For any question about data protection, reach us at the contact details above.
No analytics, no tracking, no ad networks
This website includes no web analytics. There is no Google Analytics, no tag manager, no advertising or conversion tracking, no social media plug-ins, and no service that recognises visitors across websites.
No profiling takes place. We build no usage profiles, neither under your name nor pseudonymously, and we do not evaluate your behaviour on this website.
All fonts, images, stylesheets, and scripts are served from our own server. When you open a page, your browser therefore makes no connection to Google Fonts, to a content delivery network, or to any other third party.
Hosting and server log files
This website is hosted by ALL-INKL.COM, Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The provider processes the data solely on our behalf and on our instructions; a data processing agreement under Art. 28 GDPR is in place. The servers are located in Germany.
Each time a page is requested, the server automatically records data transmitted by your browser: the address requested, the date and time of access, the volume of data transferred, the HTTP status code, the previously visited page (referrer), browser type and version, operating system, and IP address.
This data is technically necessary to deliver the page and serves the stability and security of the system, for example to fend off attacks. The legal basis is our legitimate interest in a secure and functioning website (Art. 6 (1) lit. f GDPR). This data is not merged with other data sources, and we do not evaluate the log files for marketing purposes.
Cookies and local storage
This website sets no cookies. Not for analytics or advertising, and not for technical operation either.
When you acknowledge the privacy notice at the bottom of the screen, your browser stores a single entry in local storage under the key hbi.cookie-notice.dismissed.v1 with the value 1, so the notice is not shown again on your next visit. This entry contains no personal data, is never transmitted to us or to third parties, and does not leave your device.
The legal basis for this storage is § 25 (2) no. 2 TDDDG, as it is strictly necessary for the function you explicitly requested (permanently dismissing the notice). You can delete the entry at any time in your browser settings, after which the notice reappears.
Contact form
Our contact form lets you send us your name, company, email address, phone number, service area, subject, and message. Name, email address, and message are mandatory; all other fields are optional.
Submission runs through the form relay service alwaysuprelay.de, operated by alwaysupstudio, St. Georg Siedlung 11, 83043 Bad Aibling, Germany. Because this website is served statically and runs no server application of its own, the service performs the spam check and then delivers your message to us by email. Only the form fields you filled in are transmitted. The operator processes them solely on our behalf; a data processing agreement under Art. 28 GDPR is in place. The servers are located in Germany. The data is not passed on to any further third party.
The legal basis is your consent under Art. 6 (1) lit. a GDPR, which you give via the checkbox before sending. If your enquiry concerns the initiation or performance of a contract, Art. 6 (1) lit. b GDPR applies in addition.
You may withdraw your consent at any time by informal email. The lawfulness of the processing carried out before the withdrawal remains unaffected. We store the data until your enquiry has been dealt with and no follow-up questions are to be expected, and at the latest until you withdraw consent or request deletion. Statutory retention obligations, in particular under commercial and tax law, remain unaffected.
Contact by email, phone, or post
If you contact us directly, we process your details in order to handle your request. The legal basis is Art. 6 (1) lit. b GDPR where your enquiry relates to a contract or its initiation, otherwise our legitimate interest in answering enquiries (Art. 6 (1) lit. f GDPR).
The data is deleted as soon as it is no longer needed for that purpose and no statutory retention obligations apply.
External links and map service
On our location pages we link to Google Maps so you can find your way to our offices. No map is embedded: as long as you do not click the link, no connection to Google is established and no data is transmitted to Google.
If you follow an external link, the privacy policy of the respective provider applies. We have no influence on how those providers process your data.
Encryption
This website is served exclusively over a TLS-encrypted connection, so data you transmit via the website cannot be read by third parties. You can identify an encrypted connection by the https:// prefix in the address bar and the lock icon in your browser.
Recipients of your data
Outside our company, your data is received only by the processors named above, that is the hosting provider and the operator of the form relay, each bound by an agreement under Art. 28 GDPR and limited to what their service requires.
No transfer to countries outside the European Union or the European Economic Area takes place. We do not sell data and do not pass it on for advertising purposes. Disclosure to authorities occurs only where we are legally obliged to do so.
Your rights
You have the right to information about the data stored about you, its origin, its recipients, and the purpose of processing (Art. 15 GDPR), to rectification of inaccurate data (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR), and to data portability in a machine-readable format (Art. 20 GDPR).
An informal message to the contact details above is enough to exercise these rights. Information is provided free of charge.
Objection and withdrawal
Where we process data on the basis of a legitimate interest, you may object to that processing under Art. 21 GDPR on grounds relating to your particular situation. We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests.
You may withdraw consent you have given at any time with effect for the future. An informal email is sufficient. The lawfulness of processing carried out before the withdrawal remains unaffected.
Right to complain to a supervisory authority
You have the right to complain to a data protection supervisory authority about how we process your personal data. The authority responsible for us is the one at our registered office:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27, 91522 Ansbach, Germany
lda.bayern.de
You may equally contact the supervisory authority of your habitual residence or place of work.
No automated decision-making
Automated decision-making, including profiling, within the meaning of Art. 22 GDPR does not take place.
Changes to this policy
We update this privacy policy when the legal situation or the technology used on this website changes. The version published here applies to your visit.
Last updated: September 2026.